Hacker News Reader

I don't understand why they don't just include a dumb filter on output that blocks any repetition of the system prompt. Presumably they don't want these rules publicly known, yet they leak regularly.

View on HN

My understanding is that they do, and that these prompt revelations are actually just hallucinations.

That's a great question. They already do some sort of post-model filtering and output-checking, right?

Reply on news.ycombinator.com